Privacy Notice

Steps To Living is the data controller for personal data processed through Steps To Sober Living. This notice explains what we collect and why.

Personal data we collect

• Account data — name, email address, password hash, role (operator or resident), and sign-in timestamps.
• Billing data — subscription status, plan, billing period, and the payment identifiers returned by our payment provider. We never see or store full card numbers.
• Resident records entered by operators — name, contact details, house and bed assignment, move-in and sobriety dates, employment status, emergency contacts.
• Health-related data — drug-test (UA) results and photos, medication administration records, and incident or shift notes. This is sensitive data and is restricted to the operator who entered it.
• Activity data — curfew check-ins, meeting attendance, milestones, signed documents.
• AI helper conversations — messages between a resident and the AI helper, which are private to that resident. Operators see only risk alerts, never the message content.
• Technical data — IP address, browser type, and log data needed to keep the service secure.

Why we use it

To provide and secure the service, to process subscriptions and rent payments, to support you, to comply with legal obligations, and — where a resident is at risk — to alert the on-call house manager. We do not sell personal data and do not use it for advertising.

Who we share it with

• Supabase — database, authentication and file hosting.
• Our AI model provider — processes helper messages to generate replies.
• Law enforcement or regulators where we are legally required to disclose.

Retention

We keep account and resident records for as long as the operator's account is active and for up to 12 months afterwards, unless a longer period is required by law. Billing records are kept as required for tax and accounting.

Your rights

Depending on where you live you may request access, correction, deletion, restriction, portability, or object to processing. Residents should contact their house operator first; you can also contact us directly and we will help.

Security

Data is encrypted in transit, access is scoped by row-level security so an operator can only reach their own houses' data, and resident portal accounts can only reach their own record.

Contact

will@stepstolivingllc.com — Steps To Living.